| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| d7y.io/dragonfly/v2 | < 2.1.0 | 2.1.0 |
| github.com/dragonflyoss/dragonfly | < 2.1.0全バージョン | 2.1.0 |
| dragonfly | < 2.1.0 | 2.1.0 |
The access control mechanism for the Proxy feature uses simple string comparisons and is therefore vulnerable to timing attacks. An attacker may try to guess the password one character at a time by sending all possible characters to a vulnerable mechanism and measuring the comparison instruction’s execution times. The vulnerability is shown in figure 8.1, where both the username and password are compared with a short-circuiting equality operation.
if user != proxy.basicAuth.Username || pass != proxy.basicAuth.Password {
It is currently undetermined what an attacker may be able to do with access to the proxy password.
There are no effective workarounds, beyond upgrading.
A third party security audit was performed by Trail of Bits, you can see the full report.
If you have any questions or comments about this advisory, please email us at [email protected].
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン